Security Operations Engineer

Build AI-powered security operations at Workleap, using detection engineering and incident response across a remote Canada-wide environment.

As a Staff individual contributor, you will own threat detection, investigation, and response across Workleap and Share Gate. You will build agent systems that triage, enrich, correlate, and draft investigations. The work also covers cloud security, developer collaboration, and measurable operational improvements.

• Build end-to-end alert integrations and investigation workflows
• Define agent trust boundaries using evaluations and security controls
• Reduce false positives and correctly prioritize findings
• Write detections as code mapped to MITRE ATT&CK
• Lead incidents from triage through postmortems

• Seven or more years in security operations or detection engineering
• Recent hands-on experience in cloud SaaS environments
• Experience building agent systems for security work
• Fluent SIEM query language and measured false-positive rates
• Strong understanding of identity and cloud attack paths

Bring security operations, detection engineering, and agent-building expertise to strengthen Workleap and Share Gate protection.